Dahua Security DVR Appliances CVE-2013-3613 Authentication Bypass Vulnerability
BID:62402
Info
Dahua Security DVR Appliances CVE-2013-3613 Authentication Bypass Vulnerability
| Bugtraq ID: | 62402 |
| Class: | Design Error |
| CVE: |
CVE-2013-3613 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 13 2013 12:00AM |
| Updated: | Sep 13 2013 12:00AM |
| Credit: | Andrey Bezborodov, Kirill Ermakov, Alexander Raspopov, and Dmitry Sklyarov of Positive Technologies. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Dahua Security DVR Appliances CVE-2013-3613 Authentication Bypass Vulnerability
Dahua Security DVR Appliances are prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may aid in further attacks.
Dahua Security DVR Appliances are prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may aid in further attacks.
Exploit / POC
Dahua Security DVR Appliances CVE-2013-3613 Authentication Bypass Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
References
Dahua Security DVR Appliances CVE-2013-3613 Authentication Bypass Vulnerability
References:
References:
- DVR Appliances Homepage (Zhejiang Dahua Technology)
- VU#800094 Dahua Security DVRs contain multiple vulnerabilities (US-CERT)